STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must limit the number of concurrent sessions to 10 for all accounts and/or account types.

DISA Rule

SV-270677r1101774_rule

Vulnerability Number

V-270677

Group Title

SRG-OS-000027-GPOS-00008

Rule Version

UBTU-24-200000

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure Ubuntu 24.04 LTS to limit the number of concurrent sessions to 10 for all accounts and/or account types.

Add the following line to the top of the /etc/security/limits.conf or in a ".conf" file defined in /etc/security/limits.d/:

* hard maxlogins 10

Check Contents

Verify Ubuntu 24.04 LTS limits the number of concurrent sessions to 10 for all accounts and/or account types with the following command:

$ grep -r maxlogins /etc/security/limits.conf /etc/security/limits.d/*.conf
/etc/security/limits.d/maxlogins.conf:* hard maxlogins 10

If the "maxlogins" item does not have a value of "10" or less, is commented out, or is missing, this is a finding.

Vulnerability Number

V-270677

Documentable

False

Rule Version

UBTU-24-200000

Severity Override Guidance

Verify Ubuntu 24.04 LTS limits the number of concurrent sessions to 10 for all accounts and/or account types with the following command:

$ grep -r maxlogins /etc/security/limits.conf /etc/security/limits.d/*.conf
/etc/security/limits.d/maxlogins.conf:* hard maxlogins 10

If the "maxlogins" item does not have a value of "10" or less, is commented out, or is missing, this is a finding.

Check Content Reference

M

Target Key

5673